CVE-2024-58052

drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table

State: Published
Severity: 5.5 Medium
Published: Mar 6, 2025
Updated: May 11, 2026
Reserved: Mar 6, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table

The function atomctrl_get_smc_sclk_range_table() does not check the return value of smu_atom_get_data_table(). If smu_atom_get_data_table() fails to retrieve SMU_Info table, it returns NULL which is later dereferenced.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

In practice this should never happen as this code only gets called on polaris chips and the vbios data table will always be present on those chips.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before a713ba7167c2d74c477dd7764dbbdbe3199f17f4Affected a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before c47066ed7c8f3b320ef87fa6217a2b8b24e127ccAffected a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 2396bc91935c6da0588ce07850d07897974bd350Affected a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before ae522ad211ec4b72eaf742b25f24b0a406afcba1Affected a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 6a30634a2e0f1dd3c6b39fd0f114c32893a9907aAffected a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 0b97cd8a61b2b40fd73cf92a4bb2256462d22adbAffected a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 396350adf0e5ad4bf05f01e4d79bfb82f0f6c41aAffected a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 357445e28ff004d7f10967aa93ddb4bffa5c3688Affected
LinuxLinux	4.7Affected before 4.7Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.76 through 6.6.Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before a713ba7167c2d74c477dd7764dbbdbe3199f17f4Affected
a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before c47066ed7c8f3b320ef87fa6217a2b8b24e127ccAffected
a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 2396bc91935c6da0588ce07850d07897974bd350Affected
a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before ae522ad211ec4b72eaf742b25f24b0a406afcba1Affected
a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 6a30634a2e0f1dd3c6b39fd0f114c32893a9907aAffected
a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 0b97cd8a61b2b40fd73cf92a4bb2256462d22adbAffected
a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 396350adf0e5ad4bf05f01e4d79bfb82f0f6c41aAffected
a23eefa2f4615af91ea496ca5b55c9e7c6fa934c to before 357445e28ff004d7f10967aa93ddb4bffa5c3688Affected

LinuxLinux

4.7Affected
before 4.7Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.76 through 6.6.*Not affected
6.12.13 through 6.12.*Not affected
6.13.2 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.